CVE-2009-0016

Apple iTunes before 8.1 on Windows allows remote attackers to cause a denial of service infinite loop via a Digital Audio Access Protocol DAAP message with a crafted Content-Length header...

CVE-2009-0143

Apple iTunes

CVE-2009-0016

Apple iTunes for Windows before 8.1 is vulnerable to a Denial of Service caused by processing a DAAP message with a crafted Content-Length header, leading to an infinite loop/crash. The issue affects iTunes on Windows (pre-8.1); remediation is to upgrade to iTunes 8.1 or later. (Based on CVE-2009...

Apple iTunes信息泄露和拒绝服务漏洞

BUGTRAQ ID: 34094 CVECAN ID: CVE-2009-0016,CVE-2009-0143 Apple iTunes是一款媒体播放程序。 iTunes在处理数字音频访问协议（DAAP）消息时存在死循环，如果远程攻击者在发送的消息的DAAP头中包含了特制的Content-Length参数的话就会导致播放器崩溃。 iTunes的podcast功能中存在设计错误，订阅到恶意的podcast可能会向用户显示认证对话框，该对话框可诱骗用户向podcast服务器发送iTunes凭据。 Apple iTunes 8.0 厂商补丁： Apple -----...

Apple patches iTunes password-stealing hole

Apple has issued an advisory to warn that malicious hackers can rig audio files to hijack usernames and passwords from its popular iTunes media player. The company described the bug as a “design issue” in the iTunes podcast feature can be abused via rigged audio files to cause an authentication...

iTunes < 8.1 Malicious Podcast Information Disclosure (Mac OS X)

The remote version of iTunes is affected by a remote information disclosure vulnerability. By tricking a user on the affected host into authenticating to a malicious podcast, an attacker could gain the user's iTunes account information. C Tenable Network Security, Inc. include"compat.inc"; if...

Apple iTunes < 8.1 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 8.1. It is, therefore, affected by multiple vulnerabilities : - A remote attacker can cause a denial of service by sending a maliciously crafted DAAP message. Note that this vulnerability only affects iTunes running on a Windows...

Apple iTunes < 8.1 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 8.1. Such versions may be affected by multiple vulnerabilities : - It may be possible to cause a denial of service by sending a maliciously crafted DAAP header to the application. CVE-2009-0016 - When subscribing to a...

iTunes < 8.1 Multiple Vulnerabilities

Binary data 4958.prm...

Apple iTunes Malformed .mov File Buffer Overflow Vulnerability

Apple iTunes is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes";...

CVE-2008-5406

Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a MOV file with "long arguments," related to an "off by one overflow."...

CVE-2008-5406

Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a MOV file with "long arguments," related to an "off by one overflow."...

CVE-2008-5406

Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 are affected by a stack-based buffer overflow in MOV parsing (described as an off-by-one overflow). This vulnerability can cause a denial of service and may allow arbitrary code execution, as noted in the CVE-2008-5406 description. OpenVAS entries ...

Quicktime 7.5.5 (.mov File) / iTunes 8.0.2.20 Multiple Off By Overflow PoC

Exploit for unknown platform in category dos / poc ================================================================================ Apple iTunes 8.0.2.20 / Quicktime 7.5.5 .mov File Multiple Off By Overflow PoC ================================================================================...

Itunes 8.0.2.20/Quicktime 7.5.5 (.mov File) Multiple Off By Overflow PoC

No description provided by source. --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Quicktime/Itunes Multiple Remo...

Apple iTunes 8.0.2.20QuickTime 7.5.5 - .mov Multiple Off By Overflows (PoC)

Apple iTunes 8.0.2.20QuickTime 7.5.5 - .mov Multiple Off By Overflows PoC...

itune-overflow.txt

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Quicktime/Itunes Multiple Remote Off By One Overflow Application:...

Apple iTunes Detection (Windows SMB Login)

SMB login-based detection of Apple iTunes. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; ifdescription...

GEAR Software CD DVD Filter Driver Insecure Method Local Privilege Escalation

The version of GEAR Software's CD DVD Filter kernel driver GEARAspiWDM.sys on the remote host contains an insecure method that allows a local user to make an unlimited number of calls to 'IoAttachDevice' from user-land, thereby enabling him to exploit a local privilege escalation flaw in the...

Gear Software CD DVD Filter driver privilege escalation vulnerability

Overview The Gear Software CD DVD Filter driver contains a privilege escalation vulnerability, which can allow an attacker to gain SYSTEM privileges. Description Gear Software provides a driver called CD DVD Filter, which is provided by GEARAspiWDM.sys. This driver is used by multiple CD/DVD...